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In the Claims: 

This listing of claims will replace all prior versions, and listings of claims in the 
application. The status of each claim is indicated. Currently amended claims are shown with 
additions underlined and deletions in strikothrough text . Claims 10-19 have been canceled 
without prejudice to or disclaimer of the subject matter therein. Claims 21-37 are new. No 
matter has been added. 

1 . (Original) A system for ensuring the identity and travel privileges of potential travelers, 
comprising: 

a. at least one institution for researching and recording an identity and at least one travel 
privilege for individuals; 

b. at least one database maintained by the institution for associating identified individuals' 
names, an assigned asymmetric key pair, and the at least one travel privilege, said at least one 
travel privilege including: 

i. at least one destination restriction; 

ii. at least one date and time restriction; 

iii. at least one mode of transportation restriction; 

iv. at least one operator restriction; and 

v. an expiration date for each at least one travel privilege; 

c. at least one travel privilege certificate associated with the at least one travel privilege 
and further associated with an identified individual; and 

d. at least one personal identification device including a means for enrolling and 
authenticating individuals and managing travel privilege certificates. 

2. (Original) The system described in claim 1, wherein the travel privilege certificate 
comprises: 

a. a name field, comprising the identified individual's full name; 

b. a date field, comprising a date when the identified individual is allowed to travel; 

c. a time field, comprising a time when the identified individual is allowed to travel; 
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d. a mode of transportation field, comprising a list of the modes of transportation that the 
identified individual is allowed to employ; 

e. a type of privilege field, comprising the type of privilege signified by the travel 
privilege certificate; 

f. an issue date field, comprising the date when the travel privilege certificate is issued; 

g. an expiration date field, comprising the date when the travel privilege certificate is no 
longer valid; 

h. a unique serial number; and 

i. a digital signature created by the issuer of the travel privilege certificate. 

3. (Original) The system described in claim 2 wherein the list of the modes of transportation 
includes at least one mode selected from the group consisting of a train, a bus, a car, an airplane 
and a ship. 

4. (Original) The system described in claim 2 wherein the type of privilege is selected from 
the group consisting of a reservation ticket, a boarding pass, a port-of-entry permission and a 
vehicle operator permission. 

5. (Original) The system described in claim 1 wherein the database is formed by completing 
the following steps for each individual: 

a. collecting a digital representation of the individual's handwritten signature; 

b. collecting a digital photograph of the individual's face; 

c. collecting a digital fingerprint template of the individual's fingerprint; 

d. collecting personal identification credentials from the individual, including a birth 
certificate and a social security number; 

e. verifying the identity of the individual by the following steps: 

i. submitting the collected digital fingerprint template to the Federal Department 
of Criminal Justice database for review; 

ii. submitting the collected birth certificate to the National Association of Public 
Health Services Information System database for review; 
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iii. submitting the collected social security number to the social security number 
database for review; 

iv. submitting the individual's name and the collected social security number to 
the Immigration and Naturalization Service database for review; 

v. submitting the individual's name and the collected digital photograph to a 
database of already-enrolled individuals' names and photographs for review; 

j. determining if the individual is authorized to travel; 
k. determining authorized destinations for the individual; 
1. determining authorized travel times and durations for the individual; 
m. determining authorized modes of transportation for the individual; 
n. creating a digital certificate and an asymmetric key pair for the individual; and 
o. adding the individual's name, the collected digital photograph, public key, a date-of- 
validity, and the determined privileges to the database of already-enrolled individuals. 

6. (Original) The system described in claim 1 wherein the means for enrolling and 
authenticating individuals and managing travel privilege certificates, comprises: 

a. first download means for downloading at least one travel privilege certificate to said 
personal identification device; 

b. transmission means for transmitting at least one travel privilege certificate from said 
personal identification device; 

c. recording means for recording at least one notable event on said personal identification 

device; 

d. first storage means for storing at least one travel privilege certificate on said personal 
identification device; and 

e. second storage means for storing at least one application audit log on said personal 
identification device. 

7. (Original) The system described in claim 6, further comprising: 

a. verification means for verifying an individual's personal identity prior to issuing the 
travel privilege certificate; 
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b. second download means for downloading a computing mechanism onto the personal 
identification device; and 

c. third download means for downloading a digital certificate and asymmetric key pair for 
the individual into the personal identification device. 

8. (Currently Amended) The system described in claim 6 wherein an individual's request to 
complete a travel-related action is evaluated and fulfilled by the following steps: 

a. authenticating the individual to the personal identification apparatus device ; 

b. verifying the date-of-validity of a stored digital certificate; 

c. accessing a database of enrolled individuals, associated privileges, and public keys, and 
verifying the individual's ownership of the private key; 

d. viewing the individual's assigned privileges in the database; 

e. determining if the individual has at least one of any pre-existing notations, restrictions 
and provisos preventing the requested action; 

f. determining additional, action-specific notations, restrictions and provisos; 

g. creating a travel privilege certificate; 

h. receiving the travel privilege certificate; and 

i. storing the travel privilege certificate. 

9. (Currently Amended) The system described in claim 6 wherein the at least one travel 
privilege certificate is transmitted by the following steps: 

a. authenticating the individual to the personal identification apparatus device ; 

b. verifying the date-of-validity of a stored digital certificate; 

c. accessing a database of enrolled individuals, associated privileges, and public keys, and 
verifying the individual's ownership of the private key; 

d. selecting the at least one travel privilege certificate for transmission; 

e. digitally signing the at least one travel privilege certificate with a stored private key; 

and 

f. transmitting the signed travel privilege certificate. 
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10-19. (Canceled) 

20. (Original) A system for monitoring and verifying the identity of a traveling individual, 
comprising: 

a means for collecting identification information for each traveling individual, wherein 
the collected identification information includes at least one biometric characteristic for the 
individual; 

a means for verifying the collected identification information; 
a means for determining at least one travel privilege for the traveling individual; 
a means for creating an electronic travel privilege certificate based on the determined at 
least one travel privilege; 

a personal identification device; 

a means for transmitting the electronic travel privilege certificate to the personal 
identification device; and 

a means for reading the electronic travel privilege certificate from the personal 
identification device as necessary during the traveling individual's travel. 

21. (New) A processor-readable medium storing code representing instructions to cause a 
processor to perform a process, the code comprising code to: 

authenticate, at a personal identification device, a biometric input from a user based on a 
biometric template stored at the personal identification device and associated with the user; and 

send a request for a travel permission information from the personal identification device 
when the biometric input from the user is authenticated. 

22. (New) The processor-readable medium of claim 2 1 , the code further comprising code to: 
receive the biometric input from the user before the biometric input from the user is 

authenticated, the biometric input being at least one of a fingerprint information of the user, a 
retinal information of the user and an image information of the user. 
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23. (New) The processor-readable medium of claim 21, wherein the request includes the 
biometric input from the user. 

24. (New) The processor-readable medium of claim 2 1 , the code further comprising code to: 
send an admission ticket information associated with the travel permission information 

when the biometric input from the user is authenticated. 

25. (New) The processor-readable medium of claim 21 wherein the travel permission 
information is associated with an admission ticket of a travel provider. 

26. (New) The processor-readable medium of claim 21 wherein the travel permission 
information includes at least one of a time restriction, a mode of transportation restriction, a 
destination restriction, a date restriction, an operator restriction, and an expiration date 
restriction. 

27. (New) The processor-readable medium of claim 21 wherein the travel permission 
information is encrypted based on an asymmetric key pair associated with a travel governing 
authority. 

28. (New) The processor-readable medium of claim 21 , the code further comprising code to: 
enroll the biometric template at an enrollment authority before the biometric input from 

the user is authenticated. 

29. (New) A processor-readable medium storing code representing instructions to cause a 
processor to perform a process, the code comprising code to: 

receive a request for a travel permission information from a personal identification device 
associated with a user, the request including at least one a biometric information of the user or an 
authentication of the biometric information; and 
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send the travel permission information associated with the user when the biometric 
information is authenticated, the travel permission information being encrypted based on an 
asymmetric key pair. 

30. (New) The processor-readable medium of claim 29, the code further comprising code to: 
produce the travel permission information based on the biometric information of the user 

before the travel permission information is sent. 

3 1 . (New) The processor-readable medium of claim 29, the code further comprising code to: 
obtain the travel permission information associated with the user from a database before 

the travel permission information is sent, the database including at least one personal identity 
credential for each user from a plurality of users, each user from the plurality of users being 
associated with at least one travel permission information. 

32. (New) The processor-readable medium of claim 29, wherein the request includes the 
biometric information of the user and excludes the authentication of the biometric information, 
the code further comprising code to: 

authenticate, before the travel permission information is sent, the biometric information 
of the user. 

33. (New) The processor-readable medium of claim 29, wherein the request includes the 
biometric information of the user. 

34. (New) The processor-readable medium of claim 29, wherein the biometric information is 
a fingerprint information of the user, the code further comprising code to: 

receive the fingerprint information of the user before the travel permission information is 
sent; and 

authenticate, before the travel permission information is sent, the fingerprint information 
of the user. 
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35. (New) The processor-readable medium of claim 29, wherein the travel permission 
information is sent to the personal identification device of the user. 

36. (New) The processor-readable medium of claim 29, the code further comprising code to: 
receive the travel permission information from an enrollment authority before the travel 

permission information is sent. 

37. (New) The processor-readable medium of claim 29, wherein the travel permission 
information includes at least one of a time restriction, a mode of transportation restriction, a 
destination restriction, a date restriction, an operator restriction, and an expiration date 
restriction. 



